Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
File: xcymnU3Y7tz2A-NjKVsZtpAp71w.mft (raw, json)
Hash identifier: fXHWjuWiBtisVVJOxrbdb/ORCSfffVRLZGpXHRiA/tM=
Subject key identifier: C2:80:40:DD:87:56:DC:7C:E2:E0:7C:C3:F2:50:33:AD:85:A5:1C:8C
Authority key identifier: C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
Certificate issuer: /CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Certificate serial: 0198D65F56FEBBA47508C9E0820AD54ACE5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:00:29 +0000
Manifest this update: Sat 23 Aug 2025 10:00:29 +0000
Manifest next update: Sun 24 Aug 2025 10:00:29 +0000
Files and hashes: 1: xcymnU3Y7tz2A-NjKVsZtpAp71w.crl (hash: 0z1LAR7R4ZbkLdJXk7iewjSEhpq6DTEed0PKt1y9U/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:56:fe:bb:a4:75:08:c9:e0:82:0a:d5:4a:ce:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Validity
Not Before: Aug 23 10:00:29 2025 GMT
Not After : Aug 24 10:00:29 2025 GMT
Subject: CN=c28040dd8756dc7ce2e07cc3f25033ad85a51c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ce:9f:33:98:10:dc:89:fb:c7:a9:1d:62:09:
61:4c:5e:8f:84:2d:75:d5:2b:fd:23:67:08:cf:df:
3a:11:8d:d1:7d:52:88:0b:34:12:11:f4:c9:58:a9:
a2:0e:f1:91:4d:8c:63:db:be:b6:62:50:7b:1e:c5:
4f:71:43:82:65:6e:05:a2:37:27:98:10:57:dd:fc:
0f:04:69:73:65:a4:ec:dd:80:15:10:00:3f:f4:0c:
a4:7a:09:67:a7:f8:2d:e4:8a:27:5c:97:19:3e:34:
f1:3f:14:e9:fe:3c:62:ff:28:6d:39:bc:00:7d:54:
53:a1:30:2a:17:6b:1a:33:95:2c:34:60:1c:2c:3e:
d8:22:9d:47:e3:c5:18:b4:0c:ea:c3:be:7b:46:e3:
c4:d5:22:eb:38:be:e7:2d:ca:2b:6a:a9:d2:8a:ab:
44:e0:12:be:b1:bb:5e:41:4f:9e:11:20:6b:ea:7c:
6a:30:c2:ec:5a:dd:99:2f:cc:da:73:b3:e2:80:f0:
ee:9f:f0:6f:9d:89:08:45:02:b8:e4:16:6c:65:7f:
1c:9b:1f:fa:51:c6:5a:8a:e8:a6:af:3d:66:da:6e:
d5:91:c3:f7:7b:e0:fe:16:0c:fd:12:17:08:7d:cd:
5d:4f:e1:3d:cd:e3:ca:bb:62:93:29:56:6a:d9:ff:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:80:40:DD:87:56:DC:7C:E2:E0:7C:C3:F2:50:33:AD:85:A5:1C:8C
X509v3 Authority Key Identifier:
keyid:C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9a:36:4a:2e:9c:0a:86:b3:9f:e8:a1:2b:90:11:51:a4:e7:
60:1b:26:98:8f:99:93:58:f2:c0:6b:de:f3:1c:53:5f:0e:16:
8d:7b:fd:49:66:19:67:77:ba:1b:3f:51:1b:48:6f:fd:05:f9:
c6:06:ae:74:57:7c:de:3b:28:f2:25:9d:9e:12:dc:5e:f7:53:
12:f5:fc:d3:e0:b1:a5:e4:fe:74:ba:20:d8:e6:2a:9c:ca:95:
f3:e9:16:77:56:31:cc:41:6e:aa:3c:8b:bb:ed:aa:5b:2d:1f:
74:68:bb:fd:83:5c:8c:91:02:b0:15:17:c1:92:12:66:d1:e7:
c6:90:df:3a:73:9f:d1:e4:72:c9:1e:e0:7e:79:68:13:68:0a:
d2:54:95:54:36:5c:11:ea:5c:73:a2:d5:3a:95:79:22:61:02:
5d:dd:a3:d8:4c:68:c9:ab:23:aa:b6:33:e0:87:bf:60:8c:d2:
cd:44:15:1e:b7:b9:b7:81:23:db:43:b2:4c:df:f0:92:c0:8b:
c9:29:62:9a:43:e8:fa:f6:fe:7c:9e:b1:46:12:04:25:7c:06:
46:8b:68:88:34:f3:9f:9a:90:2c:f0:dd:78:30:c3:2f:28:d6:
8f:ba:49:57:d6:bb:dc:eb:61:37:da:09:b8:09:51:22:e7:59:
2c:34:01:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:31 2025 by rpki-client